$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1107564169642639379/0/323430303a383963303a313035333a3a2f34382d3438203d3e203233373234.roa File: 323430303a383963303a313035333a3a2f34382d3438203d3e203233373234.roa (raw, json) Hash identifier: l5rZ340Z4MN0WMiCLxYWmgIzKc9FOHtRh57FgJe09cM= Subject key identifier: D5:ED:46:FD:91:42:2A:EE:21:3E:A0:EF:98:88:55:7E:66:33:AA:6A Certificate issuer: /CN=3E5989F72DCA1979D1DD9663C575ED15BFA198D5 Certificate serial: 3B075D72C40D21C38359EB4BE3162190343EF420 Authority key identifier: 3E:59:89:F7:2D:CA:19:79:D1:DD:96:63:C5:75:ED:15:BF:A1:98:D5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3E5989F72DCA1979D1DD9663C575ED15BFA198D5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1107564169642639379/0/323430303a383963303a313035333a3a2f34382d3438203d3e203233373234.roa Signing time: Fri 05 Jun 2026 07:22:34 +0000 ROA not before: Fri 05 Jun 2026 07:17:34 +0000 ROA not after: Fri 04 Jun 2027 07:22:34 +0000 asID: 23724 IP address blocks: 2400:89c0:1053::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1107564169642639379/0/3E5989F72DCA1979D1DD9663C575ED15BFA198D5.crl rsync://rpki-rps.cnnic.cn/repo/A1107564169642639379/0/3E5989F72DCA1979D1DD9663C575ED15BFA198D5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3E5989F72DCA1979D1DD9663C575ED15BFA198D5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 09:11:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:07:5d:72:c4:0d:21:c3:83:59:eb:4b:e3:16:21:90:34:3e:f4:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E5989F72DCA1979D1DD9663C575ED15BFA198D5 Validity Not Before: Jun 5 07:17:34 2026 GMT Not After : Jun 4 07:22:34 2027 GMT Subject: CN=D5ED46FD91422AEE213EA0EF9888557E6633AA6A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:bb:cf:70:6e:c4:18:4b:35:95:5b:9a:ba:1a: e7:e8:cb:17:de:a2:97:28:2c:fb:cb:a7:3b:7d:63: 9b:57:38:b4:76:99:76:7c:28:2d:24:4a:72:f8:a0: 8b:b8:fe:7b:b3:2b:b0:9a:d8:b3:d8:9b:d7:08:7d: e0:00:d4:f6:a0:4f:e4:cb:38:f9:a8:89:53:d0:a1: e6:7e:8e:b1:91:84:ad:6c:93:61:5b:c3:9c:e6:7a: 4e:29:be:6d:08:68:40:9a:66:b8:10:61:e7:cc:33: eb:85:ee:4b:d9:d2:6e:b3:49:05:ba:7c:b3:5c:40: 67:de:60:ec:f7:83:52:5c:f9:24:75:72:fd:97:48: ef:ce:c1:07:6d:18:c4:ca:54:f7:3e:b1:7c:91:78: fb:a1:66:1b:42:69:78:3b:d6:67:c4:d2:9f:18:b4: 7f:e8:24:c3:d6:e6:4b:3b:33:ae:9a:d0:10:c9:d6: 8f:bd:a9:7f:90:db:c7:18:eb:75:72:90:8e:d1:f3: 26:ad:9c:02:ce:1a:a4:0d:9b:d9:c4:b9:07:9d:df: b0:a5:f8:e6:de:1d:2e:0e:08:56:29:63:c1:d9:2a: bd:47:23:be:38:b8:2e:35:09:4c:2f:64:6f:3c:4d: 28:65:25:c6:8d:24:07:eb:c6:e8:9c:67:07:2d:a2: c3:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:ED:46:FD:91:42:2A:EE:21:3E:A0:EF:98:88:55:7E:66:33:AA:6A X509v3 Authority Key Identifier: keyid:3E:59:89:F7:2D:CA:19:79:D1:DD:96:63:C5:75:ED:15:BF:A1:98:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1107564169642639379/0/3E5989F72DCA1979D1DD9663C575ED15BFA198D5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3E5989F72DCA1979D1DD9663C575ED15BFA198D5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1107564169642639379/0/323430303a383963303a313035333a3a2f34382d3438203d3e203233373234.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:89c0:1053::/48 Signature Algorithm: sha256WithRSAEncryption a3:36:8c:b0:34:63:cb:7a:f5:2c:c6:0c:83:93:ce:1d:91:93: 3a:bb:70:6d:57:41:6e:45:0f:5e:05:68:d6:7c:df:1a:27:2f: 88:a2:c8:dc:43:56:eb:d7:8f:95:47:f6:f4:b8:2a:36:2b:dd: 74:fd:3c:84:16:f2:10:51:83:18:0b:4c:71:7a:1b:f3:89:76: e8:7f:80:7a:c5:40:71:da:6f:a2:7e:c1:18:00:ef:af:d0:0b: 7b:9f:db:dc:e9:33:2d:ee:7a:43:97:3f:22:b9:bd:49:11:71: 0e:24:b2:3f:89:8f:91:f0:75:30:ba:a2:b3:11:3e:52:55:d4: 29:40:a6:3d:47:a5:df:5d:57:29:06:d5:55:ae:a6:fd:8f:42: 31:dd:1f:69:05:2f:11:f8:68:79:a0:22:a9:af:bd:db:6d:67: 48:9a:e0:c2:56:47:c0:a6:c3:b2:c6:06:8f:20:8f:c5:e9:78: e0:74:49:e6:85:bb:30:37:a5:e9:95:34:b9:56:1b:f0:b0:df: 43:a7:7a:2c:12:a5:2d:d5:6e:6b:c0:e6:db:8a:73:3e:5a:7e: 50:92:a4:dc:0c:1c:65:df:b7:30:2b:d8:18:02:3f:c2:5f:e3: 02:3d:2c:00:b5:c3:bb:95:21:cd:dd:0f:bc:26:7e:a2:9b:a4: b4:2e:8d:c3 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgIUOwddcsQNIcODWetL4xYhkDQ+9CAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0U1OTg5RjcyRENBMTk3OUQxREQ5NjYzQzU3NUVEMTVC RkExOThENTAeFw0yNjA2MDUwNzE3MzRaFw0yNzA2MDQwNzIyMzRaMDMxMTAvBgNV BAMTKEQ1RUQ0NkZEOTE0MjJBRUUyMTNFQTBFRjk4ODg1NTdFNjYzM0FBNkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNu89wbsQYSzWVW5q6Gufoyxfe opcoLPvLpzt9Y5tXOLR2mXZ8KC0kSnL4oIu4/nuzK7Ca2LPYm9cIfeAA1PagT+TL OPmoiVPQoeZ+jrGRhK1sk2Fbw5zmek4pvm0IaECaZrgQYefMM+uF7kvZ0m6zSQW6 fLNcQGfeYOz3g1Jc+SR1cv2XSO/OwQdtGMTKVPc+sXyRePuhZhtCaXg71mfE0p8Y tH/oJMPW5ks7M66a0BDJ1o+9qX+Q28cY63VykI7R8yatnALOGqQNm9nEuQed37Cl +ObeHS4OCFYpY8HZKr1HI744uC41CUwvZG88TShlJcaNJAfrxuicZwctosMLAgMB AAGjggIhMIICHTAdBgNVHQ4EFgQU1e1G/ZFCKu4hPqDvmIhVfmYzqmowHwYDVR0j BBgwFoAUPlmJ9y3KGXnR3ZZjxXXtFb+hmNUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NzU2NDE2OTY0MjYzOTM3OS8wLzNFNTk4OUY3MkRDQTE5NzlEMUREOTY2M0M1NzVF RDE1QkZBMTk4RDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvM0U1OTg5RjcyRENBMTk3OUQxREQ5NjYzQzU3NUVEMTVCRkExOThENS5jZXIw gZcGCCsGAQUFBwELBIGKMIGHMIGEBggrBgEFBQcwC4Z4cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMTA3NTY0MTY5NjQyNjM5Mzc5LzAvMzIzNDMwMzAz YTM4Mzk2MzMwM2EzMTMwMzUzMzNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzMz NzMyMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcB Af8EEzARMA8EAgACMAkDBwAkAInAEFMwDQYJKoZIhvcNAQELBQADggEBAKM2jLA0 Y8t69SzGDIOTzh2Rkzq7cG1XQW5FD14FaNZ83xonL4iiyNxDVuvXj5VH9vS4KjYr 3XT9PIQW8hBRgxgLTHF6G/OJduh/gHrFQHHab6J+wRgA76/QC3uf29zpMy3uekOX PyK5vUkRcQ4ksj+Jj5HwdTC6orMRPlJV1ClApj1Hpd9dVykG1VWupv2PQjHdH2kF LxH4aHmgIqmvvdttZ0ia4MJWR8Cmw7LGBo8gj8XpeOB0SeaFuzA3pemVNLlWG/Cw 30OneiwSpS3VbmvA5tuKcz5aflCSpNwMHGXftzAr2BgCP8Jf4wI9LAC1w7uVIc3d D7wmfqKbpLQujcM= -----END CERTIFICATE-----Generated at Sun Jun 14 01:13:06 2026 by rpki-client